Skip to content

Prometheus Support

IED supports the Prometheus exporter since IEDK version 1.12 so that the Prometheus server can retrieve metrics data.

Endpoint

Address:

https://<IED-IPADDRESS>/metrics

Example:

https://192.168.72.140/metrics

Authenciation

Prometheus servers need credentials to access IED Prometheus exporters. Currently, only basic authentication mechanisms are supported:

  • Create a special configuration Prometheus Exporter in logging & monitoring
  • Configure prometheus username & password in Prometheus Exporter.

NOTICE

Legacy IED account authentication will not be supported from IEDK version 1.21.x

Use Prometheus username and password

In Prometheus Exporter, users can set individual username and password for Prometheus basic authentication.

  1. Enter the prometheus username, e.g. prometheus@myorg.com
  2. Enter the prometheus password, e.g. MyPassword1
  3. Click the Submit button to save the change.

Prometheus Exporter Prometheus account

Prometheus configuration example

On the Prometheus server side, the config file should look like the following.

- job_name: "192.168.72.140-ssl"
  scheme: https
  basic_auth:
    username: prometheus@myorg.com
    password: MyPassword1
  tls_config:
    insecure_skip_verify: true
  static_configs:
    - targets: ["192.168.72.140:443"]

About cache

Logging & Monitoring service uses cache for high performance and password attack defense, see Credential stuffing for more information. The cache TTL is set to 10 minutes.